| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 1 | classes: |
| 2 | - service.keystone.server.cluster |
| Mykyta Karpin | 882dcac | 2018-11-30 16:37:28 +0200 | [diff] [blame] | 3 | - system.keystone.upgrade |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 4 | - service.keepalived.cluster.single |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 5 | - system.haproxy.proxy.listen.openstack.keystone |
| Petr Michalec | 8eca205 | 2017-01-16 15:12:26 +0100 | [diff] [blame] | 6 | - system.haproxy.proxy.listen.openstack.keystone.standalone |
| Oleksii Grudev | e4ee26e | 2018-08-14 16:51:23 +0300 | [diff] [blame] | 7 | - system.linux.system.users.keystone |
| Oleksii Grudev | 614facd | 2018-08-20 13:20:29 +0300 | [diff] [blame] | 8 | - system.keystone.server.fernet_rotation.cluster |
| Oleksandr Shyshko | c4dd2d7 | 2018-08-30 18:30:59 +0300 | [diff] [blame] | 9 | - system.salt.minion.cert.mysql.clients.openstack.keystone |
| Oleksandr Bryndzii | a85aeec | 2018-09-12 13:53:36 +0000 | [diff] [blame] | 10 | - system.salt.minion.cert.rabbitmq.clients.openstack.keystone |
| Oleh Hryhorov | ceef60d | 2018-11-02 17:27:36 +0200 | [diff] [blame] | 11 | - system.keystone.client.os_client_config.admin_identity |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 12 | parameters: |
| Daniel Cech | ebf82af | 2017-10-04 16:42:22 +0200 | [diff] [blame] | 13 | _param: |
| Vasyl Saienko | 01eb317 | 2018-07-16 13:44:53 +0300 | [diff] [blame] | 14 | openstack_node_role: primary |
| Oleh Hryhorov | ceef60d | 2018-11-02 17:27:36 +0200 | [diff] [blame] | 15 | keystone_service_protocol: ${_param:cluster_internal_protocol} |
| Andrey Shestakov | 0c7e110 | 2017-08-10 13:39:04 +0300 | [diff] [blame] | 16 | linux: |
| 17 | system: |
| 18 | package: |
| 19 | python-pymysql: |
| 20 | fromrepo: ${_param:openstack_version} |
| 21 | version: latest |
| Jakub Pavlik | fe19b08 | 2018-01-10 15:41:21 +0100 | [diff] [blame] | 22 | python-cryptography: |
| 23 | fromrepo: ${_param:openstack_version} |
| 24 | version: latest |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 25 | keystone: |
| 26 | server: |
| 27 | enabled: true |
| 28 | version: ${_param:keystone_version} |
| 29 | service_token: ${_param:keystone_service_token} |
| 30 | service_tenant: service |
| 31 | admin_tenant: admin |
| 32 | admin_name: admin |
| 33 | admin_password: ${_param:keystone_admin_password} |
| 34 | admin_email: ${_param:admin_email} |
| Vasyl Saienko | 01eb317 | 2018-07-16 13:44:53 +0300 | [diff] [blame] | 35 | role: ${_param:openstack_node_role} |
| Vasyl Saienko | 7d0455d | 2018-12-06 14:43:56 +0200 | [diff] [blame] | 36 | admin_region: ${_param:openstack_region} |
| 37 | region: ${_param:openstack_region} |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 38 | bind: |
| 39 | address: ${_param:cluster_local_address} |
| sgarbuz | c2d9ec2 | 2019-04-17 12:51:37 +0300 | [diff] [blame] | 40 | private_address: ${_param:openstack_service_host} |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 41 | private_port: 35357 |
| 42 | public_address: ${_param:cluster_vip_address} |
| 43 | public_port: 5000 |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 44 | database: |
| 45 | engine: mysql |
| 46 | host: ${_param:openstack_database_address} |
| 47 | name: keystone |
| 48 | password: ${_param:mysql_keystone_password} |
| sgarbuz | f5956c2 | 2019-05-20 14:10:11 +0300 | [diff] [blame^] | 49 | user: ${_param:mysql_keystone_username} |
| Oleksandr Shyshko | c4dd2d7 | 2018-08-30 18:30:59 +0300 | [diff] [blame] | 50 | x509: |
| 51 | enabled: ${_param:openstack_mysql_x509_enabled} |
| 52 | ca_file: ${_param:mysql_keystone_ssl_ca_file} |
| 53 | key_file: ${_param:mysql_keystone_client_ssl_key_file} |
| 54 | cert_file: ${_param:mysql_keystone_client_ssl_cert_file} |
| 55 | ssl: |
| 56 | enabled: ${_param:galera_ssl_enabled} |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 57 | tokens: |
| 58 | engine: fernet |
| danys94 | 4df63fb | 2017-10-05 08:40:10 +0200 | [diff] [blame] | 59 | expiration: ${_param:keystone_tokens_expiration} |
| Oleksandr Bryndzii | 1558a8e | 2019-02-27 14:23:23 +0200 | [diff] [blame] | 60 | max_active_keys: ${_param:keystone_tokens_max_active_keys} |
| 61 | allow_expired_window: ${_param:keystone_tokens_allow_expired_window} |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 62 | location: /var/lib/keystone/fernet-keys |
| Andrey Shestakov | 9490db9 | 2017-06-15 17:17:37 +0300 | [diff] [blame] | 63 | credential: |
| 64 | location: /var/lib/keystone/credential-keys |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 65 | message_queue: |
| Oleksandr Shyshko | 3d1dd6f | 2018-09-20 18:22:04 +0300 | [diff] [blame] | 66 | port: ${_param:openstack_rabbitmq_port} |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 67 | engine: rabbitmq |
| Damian Szeluga | 2267303 | 2017-04-19 13:55:25 +0200 | [diff] [blame] | 68 | members: |
| 69 | - host: ${_param:openstack_message_queue_node01_address} |
| 70 | - host: ${_param:openstack_message_queue_node02_address} |
| 71 | - host: ${_param:openstack_message_queue_node03_address} |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 72 | user: openstack |
| 73 | password: ${_param:rabbitmq_openstack_password} |
| 74 | virtual_host: '/openstack' |
| Damian Szeluga | 2267303 | 2017-04-19 13:55:25 +0200 | [diff] [blame] | 75 | ha_queues: true |
| Oleksandr Bryndzii | a85aeec | 2018-09-12 13:53:36 +0000 | [diff] [blame] | 76 | x509: |
| 77 | enabled: ${_param:openstack_rabbitmq_x509_enabled} |
| 78 | ca_file: ${_param:rabbitmq_keystone_ssl_ca_file} |
| 79 | key_file: ${_param:rabbitmq_keystone_client_ssl_key_file} |
| 80 | cert_file: ${_param:rabbitmq_keystone_client_ssl_cert_file} |
| 81 | ssl: |
| 82 | enabled: ${_param:rabbitmq_ssl_enabled} |
| Petr Michalec | e710384 | 2017-02-02 07:21:01 +0100 | [diff] [blame] | 83 | auth_methods: |
| 84 | - password |
| 85 | - token |